@group.privacy is a string, not a symbol.
Shouldn't be doing comparisons like this in the controller, anyway. :)